感谢您信任映语 (INYU)。我们深知每一条输入的内容都是您的隐私数据。本政策旨在告知您我们如何以“最小必要”为原则保护您的隐私。
1. 交互内容：包括您在潜光、剧场、淬炼中输入的文本及上传的图像。这些数据将被用于提供即时反馈、产品功能迭代及用户体验改进。
2. 设备信息：我们会收集设备唯一识别码、系统版本及语言偏好，用于安全审计及多端适配。
我们始终将用户隐私视为产品的生命线：
1. 绝不买卖信息：我们绝不会将您的个人信息、交互记录或任何账户数据出售给任何第三方机构。
2. 零训练原则：您的交互记录不会进入任何 AI 模型的训练集或用于改进第三方算法。
3. 端侧脱敏：在数据离开您的设备前，我们通过技术手段对隐私敏感信息进行自动化脱敏处理，确保这些信息不被存储或传输。
1. 存储位置：您的个人信息及交互历史存储于云端具备高安全等级的基础设施中。
2. 合规调用：为提供高质量回复，我们会将脱敏后的内容传输至正式备案的第三方大语言模型。我们通过合同禁止其留存或利用您的数据用于模型训练。
您可以随时在“个人中心 - 删除账户”中直接自主操作：
1. 彻底物理清除：一旦注销成功，您的对话历史、语料资产、任务进度、订单数据等全量记录将从服务器中执行彻底物理清除且不可恢复。
2. 零保留承诺：注销操作将清除所有身份关联信息，我们不保留任何足以识别您身份的数据足迹。
Thank you for choosing INYU. We recognize that every input you generate constitutes private data. This policy outlines our data protection framework based on the "Minimum Necessary" principle.
1. Interaction Data: Includes text and images uploaded within Gleam, Theatre, and Alchemy. This data is utilized to provide real-time feedback, facilitate continuous functional iterations, and improve user experience.
2. Technical Context: We collect unique device identifiers, system versions, and language preferences for security auditing and cross-platform optimization.
We view user privacy as our lifeline and make the following core commitments:
1. No Data Selling: We will never sell your personal information, interaction records, or any account data to any third party.
2. Zero-Training Guarantee: Your interaction history is not utilized for training proprietary or third-party AI models or algorithms.
3. Client-side Desensitization: Automated masking of sensitive variables is performed before data egress to ensure such data is not persisted or shared.
1. Storage Location: Your personal data and interaction history are stored within high-security cloud infrastructure.
2. Compliant Invocation: For high-quality inference, desensitized data is transmitted to officially registered third-party LLMs. Providers are contractually prohibited from retaining or utilizing your data for model refinement.
You may manage your rights via "Profile - Delete Account":
1. Complete Physical Erasure: Upon successful account deletion, all records including dialogue history, corpus assets, task progress, and order data undergo complete physical erasure and are irrecoverable.
2. Zero Trace Commitment: Deletion removes all identity-linked records. No identifiable trace of your presence remains within our systems.